OSIIX Library catalogs research reports, books and learning material, practical guides, and case studies and engineering notes. It organizes knowledge from actual investigation, verification, development, and operations so you can discover it by material type.
Research Reports
Research Report · V2 Full Report / Brief
Ransomware Frontline Report V2
A research report that frames ransomware not simply as encryption malware, but as an organizational risk combining intrusion, credential abuse, control of administrative privileges, lateral movement, data theft, recovery disruption, business interruption, and extortion. The Full Report and Brief are available in both English and Japanese.
A learning resource that organizes the AI fundamentals most relevant to AI-assisted development, including models, generation, observability, RAG, and verification.
Operational Design Guide for Safer AI-Assisted Development
A public guide to methods mars70 actually tried in AI-assisted development and operational support, and found useful for reducing drift and rework. It covers change boundaries, secret material, production operations, verification, records, and stopping procedures with practical examples.
Four Boundaries to Check When Handing Off AI-Assisted Development Work
A practical framework for resuming work without mixing up projects, Git, local worktrees, or approval states by keeping the target, evidence, execution path, and approval boundaries distinct.
A Safety Harness that checks the Repository Root, Write Set, Stage Set, Branch, push destination, and Secret Scan before execution, and stops when the observed state differs from expectations.
An examination of how AI can satisfy an instruction yet still reach an outcome the human did not want, and a practical proposal to compare candidate success states before planning.
A record of trial and error building a security monitoring platform with AI assistance: contract-driven architecture, the read-only boundary, Producer/Consumer separation, and how UNKNOWN is handled.
What Does a Raw Hash Mismatch Mean? — Repository Normalization and Agent Semantics Are Different Problems
A development record that reframes CRLF/LF raw hash mismatches as a missing Agent interpretation contract rather than a Repository normalization problem — including how an initial hypothesis was disproved by a Git history investigation, and the minimal contract adopted instead.
Designing and Implementing Change Boundaries When Integrating an Existing Web Tool into Another Site
A development record examining, through a real integration case, where to place the change boundary when incorporating an existing web tool into another site. It also covers the idea of validating application health and public-route health separately.
When Correction Triggers Over-Correction: Recovery Scope Control in AI-Assisted Development
A qualitative case study drawing on development and operations records that remain traceable to their source repositories and commit history — examining two independent evaluation axes, Scope Boundary and Verification Boundary, through a bounded recovery outcome, a case where a proposal's scope expanded, and a record that shows where the Verification Boundary should be drawn.
Disambiguating Execution Failures in the Windows Codex CLI
A practitioner case study of two Windows Codex CLI execution failures, separating process-creation denial from resource-authorization denial through evidence-preserving investigation.
Designing AI Agent Verification Scope Around Failure Cost
A case study contrasting two website-operation cases by stage, reversibility, blast radius, and failure cost, while preserving the limits of the available evidence.
This guide presents methods mars70 tried while using AI in a personal development environment. It is not a general standard or the only correct approach, but one example to adapt to your own environment. AI assistance was used for wording and layout.